The Vermont Office of the Attorney General disclosed a data breach affecting The Robins Morton Group in December 2022. The incident occurred between October 16 and October 17, 2022, when unauthorized actors gained access to the company’s systems. The breach resulted in the exposure of sensitive personal information, specifically names and Social Security numbers (SSNs) of individuals. While the exact number of affected parties remains undisclosed, the compromise of SSNs poses a significant risk, as this data is highly valuable for identity theft, financial fraud, and other malicious activities. The breach underscores vulnerabilities in the company’s cybersecurity defenses, particularly in safeguarding personally identifiable information (PII). Given the nature of the exposed data, affected individuals may face long-term consequences, including potential fraud, credit damage, or targeted phishing attacks. The company has not provided further details on the root cause, containment measures, or remediation steps taken post-breach.